Ranger Audit tab doesn't show any data for Nifi

[#1]

Hi ,

I enabled Nifi with Ranger and added all the policies , but no data is showing in the audit tab in Ranger.

Any thoughts?

Sanaz

[#2]

Hi @Sanaz Janbakhsh, after enabling Nifi for Ranger, can you confirm Nifi is able to download policies from Ranger, if it is doing so Nifi service should be registered under Audits -> Plugins tab in Ranger-UI.

For nifi plugin to work, you can also get help from below articles,

https://community.hortonworks.com/articles/60842/hdf-20-defining-nifi-policies-in-ranger.html

https://community.hortonworks.com/articles/57980/hdf-20-apache-nifi-integration-with-apache-ambarir....

https://community.hortonworks.com/content/kbentry/60001/hdf-20-integrating-secured-nifi-with-secured...

[#3]

Hi,

I already enabled and added the service too and i can see the logs in plugin but not in audit, Please find my attached below.

Thanks,

SJ

[#4 · Accepted solution]

Hi @Sanaz Janbakhsh,

did you manage to install Ambari-Infra or external Solr, unless you store the logs into solr you will not be able to see the adit log information into the tab.

once you install the Ambari-Infra go to Ranger --> Configs --> Ranger Audits --> turn on AudittoSolr and SolrCloud (attached the figure here ) then restart the Ranger.

[#5]

Hi @Sanaz Janbakhsh,

Is the audit functionality working for other services, As Nifi plugin is able to download pollicies, Ranger authorization seems to be working fine.
Can you check Nifi log for audit related errors, seems Nifi is not able to write audits to Solr ?
Also do mention the Ambari / HDF versions you are using.

[#6]

Hi

I enabled Ranger in HDP just for Nifi and the plugin session and plugins tab works but both Access and Admin tab doesn't work. I couldn't see any error under

/var/log/ranger/admin logs files. Any other log files that I need to check? I also test the connection to mysql db and it works fine too.

HDF version: 2.1;Nifi:1.1.0;Ranger : 0.6.2;Ambari : 2.4

SJ

[#7]

@Sanaz Janbakhsh,

If /var/log/ranger/admin is empty or is not available, logs for Ranger will be available under /usr/hdf/current/ranger-admin/ews/logs on the host where Ranger-Admin is installed in case of a multi-node setup.

For Nifi audit not working, can you check the Nifi logs, looks like Nifi is unable to Audit to Solr, what is the Solr you are using, is it installed from Ambari as Ambari-Infra service ?

[#8]

Hi vsuvagia,

I checked the logs. it is successful call but still there is not data avaialable in the audit tab- access log.

[25/Nov/2017:10:46:27 -0700] "GET /service/assets/accessAudit?XXXXX HTTP/1.1" 200 119

I enabled the Amabari-infra service for the ranger. Please find the screenshot.

SJ.untitled.png